GeekMasher's Blog

Konarr v0.5.0 brings significant improvements to the user interface, new API endpoints, enhanced user management, and better dependency tracking capabilities

MacOS and iOS security conference Objective by the Sea v8 in Ibiza, Spain.

This is a deep-dive into building a CodeQL Extractor from scratch using Tree-Sitter and Rust.

A series of posts that will guide you through the process of building a CodeQL language support from scratch

Containers are a fundamental building block for modern applications, but they bundle a large amount of third-party code. Identifying what’s inside an image (and which versions) is critical for security. This post summarises a January 2025 presentation at Defcon 44131 covering how containers work, why SCA (Software Composition Analysis) matters, common open-source tooling (Syft/Grype, Trivy, Docker Scout, Clair) and an introduction to Konarr — an SCA platform focused on containers. It closes with pragmatic steps to reduce risk: scan early, monitor continuously, patch often, and shrink the attack surface.